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What is claimed is: 



\ LA system for classifying packets, wherein each packet has N header 
field\to be used for processing, the system comprising: 

V first set of rules associating to the packets by values of the header 
fields; and\ 

a classification system for selecting specific rules in the set of rules as 
applicable to a specific packet; 

characterized in that the classification system projects the first set of 
rules as N-dimensiona^entities on N axes in N-dimensional space, marking 
the beginning and endingValue on each axis for each rule as a breakpoint, 
numbers intervals between Bt^akpoints in sequential binary numbers, 
associates a subset of the first set of rules as applicable in each interval 
between breakpoints on each axisMhen considers a packet as a point in the 
N-dimensional space according to its^header field values, locates the binary 
numbered interval into which the point projects on each axis by performing a 
search on each axis for the numbered interW into which the point projects 
on that axis, thereby determining rules applicable to the packet for that axis, 
and then determines the specific rules applicable\o the packet from the 
subsets of rules by selecting those rules as applicable to the packet that apply 
to the packet on all of the N axes. \ 

2. The system of claim 1 wherein the search performed on each axis is a 
binary search conducted by selecting breakpoints at which the oils change 
for the binary numbered intervals. \ 

3. The system of claim 1 wherein the search performed on each axis is aV 
quatenary or higher-level M-ary search, where M is a power of 2, conducted 
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b^selecting breakpoints at which the bits change for the binary numbered 
inteVals. 

4. The system of claim 1 wherein association of applicable rules in each 
numbered \nterval is made by associating a binary string with each interval, 
with one bit dedicated to each rule. 

5. The system of claim 4 wherein the rules are associated to bit positions in 
the binary string by priority, the order of priority according to bit 
significance, and a finakrule is selected by the most significant 1 in the 
matching rules. \ 

6. The system of claim 4 wherein the applicable rules are found by ANDing 
the binary strings determined for\each axis over all axes. 

7. The system of claim 1 comprisingNat least one hardware pipeline for 
conducting the search on an axis, the pipeline comprising first, second, and 
sequential modules for accomplishing increasingly particular portions of the 
search, wherein, after the first module of the\sequential modules is used, 
determined values from the first module pass toi the second module, and 
values for a second packet enter the pipeline at the first module, the pipeline 
operations proceeding thus sequentially. \ 

8. The system of claim 7 comprising parallel pipelines wth one pipeline 
dedicated to searching on each axis in the N-dimensional sbace, wherein 
searches are conducted for applicable intervals simultaneously on each axis. 
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9. The system of claim 8 wherein applicable rules for each interval on each 
axis ate represented by individual bitmaps, with each rule assigned a bit 
position^ and wherein the outputs of the parallel pipelines, being the 
numberedWerval on each axis into which the point for a packet projects, 
are exchanged for the associated bitmaps, which are then ANDed to 
determine the applicable rules. 

10. The system of qaim 1 wherein searching is interleaved, results of 
searching on one or more axes being applied to other axes before searching 
on the other axes. \ 

11. The system of claim 10 wierein rules that are found by search to not 
apply on one or more axes are Vot considered in searches conducted on the 
other axes. \ 

12. A method for classifying packets >n routing, wherein each packet has N 
fields to be used in processing in a header, comprising the steps of: 

(a) projecting the rules as N-dimeimonal entities on N axes in Tri- 
dimensional space; \ 

(b) marking the beginning and ending value on each axis for each rule 
as a breakpoint; \ 

(c) numbering intervals on each axis sequentially with binary 
numbers; \ 

(d) identifying those breakpoints at which bits in\he interval numbers 
change; \ 

(e) associating a subset of the rules as applicable in each interval on 
each axis; \ 
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\ (f) considering a packet as a point in the N-dimensional space 
according to values of the header fields for the packet; 

(gVdetermining by search the binary numbered interval on each axis 
into which the packet point projects; 

(h) substituting the subset of rules that apply for each determined 
interval; and \ 

(i) selecting^hose rules as applicable to the packet that associate to 
the packet on all of tnfe N axes. 

1 3 . The method of claim \o wherein, in step (g) the determination is made 
by a binary search. \ 

14. The method of claim 12 wherein, in step (g), the determination is made 
by a quatenary or higher-level M-ai\ search. 

15. The method of claim 12 wherein, in step (e), association of applicable 
rules in each numbered interval is made bySassociating a binary string with 
each interval, with one bit dedicated to each rule. 

16. The method of claim 15 wherein the rules are mapped to bit positions in 
the binary string by priority, the order of priority according to bit 
significance, and a final rule is selected by the most significant 1 in the 
matching rules. \ 

17. The method of claim 15 wherein, in step (i), the matching\ules are found 
by ANDing the binary strings determined for each axis over all afces. 
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18. \The method of claim 12 wherein, in step (g), the search is conducted by 
sequential modules in at least one hardware pipeline, the pipeline comprising 
first, secVnd, and sequential modules for accomplishing increasingly 
particular portions of the search, and wherein, after the first module of the 
sequential modules is used, determined values from the first module pass to 
the second modWe, and values for a second packet enter the pipeline at the 
first module, the pipeline operations proceeding thus sequentially. 

19. The method of claim 17 comprising parallel pipelines with one pipeline 
dedicated to searching onVach axis in the N-dimensional space, wherein 
searches are conducted for applicable interval simultaneously on each axis. 

20. The method of claim 19 whetein applicable rules for each interval on 
each axis are represented by individual bitmaps, with each rule assigned a bit 
position, and wherein the outputs of the parallel pipeline, being the 
numbered interval on each axis into which the point for a packet projects, 
are exchanged for the associated bitmaps, which are then ANDed to 
determine the second set of matching rules. \ 

21. The method of claim 12 wherein, in step (g) searching is interleaved, 
results of searching on one or more axes being applied to other axes before 
searching on the other axes. \ 

22. The method of claim 21 wherein rules that are found by\earch to not 
apply on one or more axes are not considered in searches conchacted on the 
other axes. \ 
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23. Dt^system for classifying packets by binary or higher-level searching 
for intervals irttQwhich rules project on axes, a method for simplifying a 
search, comprising st^s.of: 

(a) conducting a first Search on one or more axes; and 

(b) using information from the^fii^t search to simplify further 
searching on remaining axes. 



